181.78.200.79
# IP INTELLIGENCE BRIEFING: 181.78.200.79/32
## Executive Summary
IP 181.78.200.79 presents a LOW RISK profile with no active threat indicators. The address is associated with legitimate telecommunications infrastructure in South America. No immediate defensive action is recommended based on current data.
---
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 0 (Low Risk) |
| **ASN** | 52468 |
| **Organization** | NEGOCIOS Y TELEFONIA NEDETEL S.A. |
| **CIDR Block** | 181.78.192.0/20 |
| **RIR** | LACNIC (Latin America) |
| **Netname** | 181.78.192.0 - 181.78.207.255 |
| **Abuse Contact** | dparral@ufinet.com |
## Geolocation Analysis
Geolocation signals show mixed indicators between Ecuador and Argentina:
- Consensus Location: Ecuador, Quito, Pichincha (via MaxMind GeoLite2)
- Alternative Location: Argentina (via Cymru Country method, 35% confidence)
- Timezone: America/Argentina/Buenos_Aires
- Accuracy Radius: 1,500 km
The discrepancy in geolocation data warrants monitoring but does not indicate malicious activity.
## Network Services & DNS
- Service State: Firewalled / No Services Detected
- Open Ports: None
- DNS PTR: 79-200-78-181.ufinet.com.ec
- Forward Resolution: 1 record (ufinet.com.ec)
- Hosted Domains: 0
- TLS/HTTP: No active services
## Threat Intelligence Indicators
| Indicator | Status |
|---|---|
| Blacklist Count | 0 |
| Known Attacker | No |
| Tor Exit Node | No |
| Spam Source | No |
| Known Campaigns | None |
| Pulsedive Risk | N/A |
## Historical Observation
Total Observations: 15 signals recorded
Key temporal signals observed:
- Ownership: Consistent association with NEDETEL S.A. (LACNIC)
- Geolocation: Multiple location signals (Ecuador primary, Argentina secondary)
- Abuse Lists: 8 total listings referenced, 0 actual hits
- Stability: No ownership changes detected; threat persistence days: 0
## Neighborhood Analysis
- Subnet: 181.78.200.0/24
- Neighbor Count: 0
- Abuse Density: 0%
- High Risk Neighbors: 0
- Threat Siblings: 0
## Related Entities
| Type | Target |
|---|---|
| Same Network | 181.78.192.0 - 181.78.207.255 |
| DNS Association | 79-200-78-181.ufinet.com.ec |
## Control Plane Status
- BGP Prefix: 181.78.200.0/24
- Route Stability: False
- RPKI State: Not evaluated
- DNSSEC Valid: Yes
- DNSBL Lists: 0/8
## Recommended Actions
No specific firewall rules recommended based on current risk profile. The IP is classified as low-risk infrastructure with no active threat indicators.
SOC Analyst Notes
1. This IP belongs to a legitimate telecom provider (NEDETEL)
2. No malicious indicators detected in 15 historical observations
3. Geographic data inconsistencies (EC/AR) are common in regional routing and do not indicate compromise
4. No open services detected; address appears to be part of firewalled infrastructure
5. No action required at this time; continue standard monitoring
---
Intelligence Quality: Standard
Last Updated: 2026-07-23
Classification: Defensive Security
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | NEGOCIOS Y TELEFONIA NEDETEL S.A. |
| ASN | AS52468 |
| Network Name | 181.78.192.0 - 181.78.207.255 |
| CIDR Block | 181.78.192.0/20 |
| RIR | LACNIC |
| Country | EC |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 79-200-78-181.ufinet.com.ec |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | 79-200-78-181.ufinet.com.ec |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS52468 |
| Network Prefix | 181.78.200.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 12% | 2 | 2 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 12% | 2 | 2 |
| Overall | 11% | 9 | 11 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-05 11:42:48 UTC |
| Last Seen | 2026-08-27 03:56:34 UTC |
| Profile Built | 2026-08-29 06:07:07 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 22 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 181.78.200.79
Who owns the IP address 181.78.200.79?
181.78.200.79 is registered to NEGOCIOS Y TELEFONIA NEDETEL S.A.. The address falls within the 181.78.192.0/20 network block. Registration is held at LACNIC.
Where is 181.78.200.79 located?
Geolocation data places 181.78.200.79 in New York, Pichincha, Argentina. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 181.78.200.79 malicious or safe?
181.78.200.79 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 181.78.200.79?
The reverse DNS (PTR) record for 181.78.200.79 is 79-200-78-181.ufinet.com.ec. This hostname is not forward-confirmed, so it should be treated as a weak signal.